CVE-2023-3343
First published: Thu Jul 13 2023(Updated: )
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Credit: security@wordfence.com security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WPEverest User Registration | <=3.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php#L3156
- https://plugins.trac.wordpress.org/changeset/2932199/user-registration/trunk/includes/functions-ur-core.php#file0
- https://www.wordfence.com/threat-intel/vulnerabilities/id/3590277a-3319-4707-b728-d75ea59e8ad9?source=cve
Frequently Asked Questions
What is CVE-2023-3343?
CVE-2023-3343 is a vulnerability in the User Registration plugin for WordPress that allows authenticated attackers to inject a PHP object.
What is the severity of CVE-2023-3343?
CVE-2023-3343 has a severity rating of 8.8 (high).
How does CVE-2023-3343 work?
CVE-2023-3343 works by deserializing untrusted input from the 'profile-pic-url' parameter, allowing authenticated attackers to inject a PHP object.
What software versions are affected by CVE-2023-3343?
Versions up to and including 3.0.1 of the User Registration plugin for WordPress are affected by CVE-2023-3343.
How can I fix CVE-2023-3343?
To fix CVE-2023-3343, it is recommended to update the User Registration plugin for WordPress to a version beyond 3.0.1.
- collector/nvd-latest
- agent/type
- agent/author
- agent/remedy
- agent/softwarecombine
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/wpeverest
- canonical/wpeverest user registration
- version/wpeverest user registration/3.0.1